0eebaecd21099d1d1bb14b5800e6f9a0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0eebaecd21099d1d1bb14b5800e6f9a0_NeikiAnalytics
Size

95KB
MD5

0eebaecd21099d1d1bb14b5800e6f9a0
SHA1

c557a4d8a7b2bc912b9df699a97bfbe816fa7e3e
SHA256

cfc81b370248b5e46750154b987460ce7835fbd08b5c2f3e284bd3bda2fb7e00
SHA512

b0faf0d99cc539f02fc3511f18b61476a192142db6e0b4f9e8ff45bbeaac92b677863359e1720458636119145441d778dce92709e77c60e1ddff6a2e3ccff9d5
SSDEEP

1536:9eifkxBB6C1MqmRzB+0ihT5RJ2EzkjZ0vBJ52zq9aGgUjfSqd:9jfkxBvMvBrivRJ28CZEcGg8q8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0eebaecd21099d1d1bb14b5800e6f9a0_NeikiAnalytics

Files

0eebaecd21099d1d1bb14b5800e6f9a0_NeikiAnalytics
.exe windows:1 windows x86 arch:x86

bb9a68197a2dda6c8411f08fed623690

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FreeLibrary
GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc

winmm

mciSendStringA

msacm32

acmStreamOpen

user32

LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
GetMessageA
DispatchMessageA
DefWindowProcA
PostQuitMessage

Sections

.text
Size: 1024B - Virtual size: 939B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 582B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE